GitHub Advisoryadvisory · Packagist

GHSA-4jch-8qq5-hqg6 Froxlor Improper Input Validation vulnerability

CRITICAL Published 2023-11-10 Modified 2023-11-12 Official page ↗

Aliases: CVE-2023-6069
Ecosystem: Packagist
Packages: froxlor/froxlor
Severity: Critical
CVSS vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Weaknesses: CWE-59
Reviewed: 2023-11-12

Affected packages

• Packagist froxlor/froxlor: < 2.1.0-beta1 → fixed in 2.1.0-beta1

Description

Improper Input Validation in GitHub repository froxlor/froxlor prior to 2.1.0-beta1.

Related

Alias · CVE (1)

CVE-2023-6069 Improper Link Resolution Before File Access in GitHub repository froxlor/froxlor prior to 2.1.0. vulnerability

Weakness · CWE (1)

CWE-59 Improper Link Resolution Before File Access weakness

References